org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr5), org.wildfly.core:wildfly-domain-http-interface (1.0.0.cr5) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr5)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr5 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha4), org.wildfly.core:wildfly-domain-management (1.0.0.alpha4) +10 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha4)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha4 -...

org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha14), org.wildfly.core:wildfly-domain-management (1.0.0.alpha14) +9 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha14)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha14 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-domain-http-interface 1.0.0.alpha14 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.alpha16), org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha16) +17 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha16)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha16 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.alpha16 -...

org.keycloak:keycloak-wildfly-extensions (>=1.2.0.beta1, <=1.2.0.final), org.wildfly.core:wildfly-domain-http-interface (1.0.0.alpha12) +10 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.alpha12)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.alpha12 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.keycloak:keycloak-wildfly-extensions =1.2.0.beta1, =1.2.0.final -...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha3), org.wildfly.core:wildfly-domain-http-interface (2.0.0.alpha3) +44 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.0.alpha3)

org.wildfly.core:wildfly-controller MAVEN version 2.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha3 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr4), org.wildfly.core:wildfly-domain-http-interface (1.0.0.cr4) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr4)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr4 -...

org.wildfly.arquillian:wildfly-arquillian-common (1.0.0.cr1), org.wildfly.arquillian:wildfly-arquillian-container-embedded (1.0.0.cr1) +25 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr2)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.arquillian:wildfly-arquillian-common 1.0.0.cr1 -...

CVE-2023-43070

Dell SmartFabric Storage Software v1.4 and earlier contains a Path Traversal Vulnerability in the HTTP interface. A remote authenticated attacker could potentially exploit this vulnerability, leading to modify or write arbitrary files to arbitrary locations in the license container...

Path traversal

Dell SmartFabric Storage Software v1.4 and earlier contains a Path Traversal Vulnerability in the HTTP interface. A remote authenticated attacker could potentially exploit this vulnerability, leading to modify or write arbitrary files to arbitrary locations in the license container...

CVE-2023-43070

Dell SmartFabric Storage Software v1.4 and earlier contains a Path Traversal Vulnerability in the HTTP interface. A remote authenticated attacker could potentially exploit this vulnerability, leading to modify or write arbitrary files to arbitrary locations in the license container...

PT-2023-28680

Name of the Vulnerable Software and Affected Versions Dell SmartFabric Storage Software versions 1.4 and earlier Description The issue is related to a Path Traversal Vulnerability in the HTTP interface, allowing a remote authenticated attacker to potentially modify or write arbitrary files to...

CVE-2023-43070: Improper Limitation of a Pathname to a Restricted Directory

Dell SmartFabric Storage Software v1.4 and earlier contains a Path Traversal Vulnerability in the HTTP interface. A remote authenticated attacker could potentially exploit this vulnerability, leading to modify or write arbitrary files to arbitrary locations in the license container...

CVE-2023-4523

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

CVE-2023-4523 Real Time Automation 460 Series Cross-site Scripting

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

PT-2023-29465 · Real Time Automation · Real Time Automation 460 Series

Name of the Vulnerable Software and Affected Versions: Real Time Automation 460 Series products versions prior to 8.9.8 Description: The issue allows an attacker to run any JavaScript reference from the URL string, which could lead to a cross-site scripting attack. If this occurs, the gateway's...

CVE-2023-4523: Improper Neutralization of Input During Web Page Generation

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

io.undertow:undertow-http2-test-suite (1.2.0.beta5), io.undertow:undertow-servlet (1.2.0.beta5) +2 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.2.0.beta5)

io.undertow:undertow-core MAVEN version 1.2.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta5 - io.undertow:undertow-servlet 1.2.0.beta5 -...

io.undertow:undertow-servlet (1.1.0.beta6), io.undertow:undertow-websockets-jsr (1.1.0.beta6) +1 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.1.0.beta6)

io.undertow:undertow-core MAVEN version 1.1.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta6 - io.undertow:undertow-websockets-jsr 1.1.0.beta6 -...

io.undertow:undertow-servlet (1.0.5.final), io.undertow:undertow-websockets-jsr (1.0.5.final) +1 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.0.5.final)

io.undertow:undertow-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.5.final - io.undertow:undertow-websockets-jsr 1.0.5.final -...